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Abstract 

This paper discusses the process used in the 
synthesis of an integrated cockpit management sys- 
tem. Areas covered include flight displays, sub- 
system management, checklists, and procedures 
(both normal and emergency). The process of evolv- 
ing from the unintegrated conventional system to 
the integrated system is examined and a brief 
description of the results presented. 

Introduction 


One way to describe the process of designing 
an integrated cockpit management system is as the 
series of steps outlined below: 

1) an analysis (functional and electrical) of 
all signals on-board the aircraft, 

2) a feasibility analysis of each signal .to 
determine if suitable for absorption into an in- 
tegrated system based on safety of flight require- 
ments and electronic considerations. 

3) an analysis of the Amotions performed by 
the operator In a standard aircraft to determine 
which ones must be performed by the operator, 
which ones the operator must know the status of, 
and which can be performed automatically, and 

4) following these analyses, the initial 
mapping of aircraft control and display functions 
from a conventional unintegrated cockpit to an 
integrated cockpit. 

This last step is the first step In an iter- 
ative process in which the top down system design 
is continuously modified as a function of the 
specific detail uncovered as the process proceeds. 
This paper describes the application of this proc- 
ess in the synthesis of the Integrated cockpit for 
the Army Digital Avionic System (ADAS). The ob- 
jective of the ADAS effort is to apply in-so-far as 
possible, the latest advances in digital system 
technology to a current production conventionally 
designed rotary wing aircraft. The aircraft chosen 
to demonstrate the application of this technology 
is the Army UH-60A Black Hawk, a twin engined 


utility helicopter manufactured by Sikorsky Air- 
craft. The steps taken in the development of both 
the system hardware and system architecture are 
explained in detail In reference 1. At this point 
in the process, a system design has been estab- 
lished and hardware is being fabricated which in- 
tegrates the following aircraft control and/or 
display subsystems: 

a) flight instruments 

b ) engine instruments 

c) caution/warning/advisoiy 

d) communi cation/navigation/identification 
and security devices 

e) aircraft survivability equipment (ASE) 

f) electrical system circuit breakers (67) 

g) secondary systems such as: cargo hook, 

lights (position, anti-collision), air source 
switching, environmental control unit, anti-ice 
(engine, windshield), pitot heaters, blade de-ice, 
attitude and heading reference system, gyros, 
radar altimeter, engine ignition, tail rotor servo, 
back-up hydraulic pump, and the hydraulic leak 
test subsystem. 

In addition, it became apparent during the de- 
sign effort that incorporation of the checklist and 
emergency procedures would be an important feature 
of this system. 

The Hardware Baseline 


A standard UH-60A Black Hawk cockpit is shown 
in figure 1. Figure 2 shows the instrument panel 
in detail, figure 3 shows the lower console, and 
figure 4 the upper console. In addition, circuit 
breaker panels are located above each operator. 

An initial top down design for a digital avionic 
cockpit for the Black Hawk was performed by Sperry 
Flight Systems and Bell Helicopter (reference 1) 
;after performing the analysis described ■. 
in steps 1, 2, and 3 in the introduction. As de- 
tails in the areas of the flight displays, paging 
and fault tolerance schemes evolved a cockpit 
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design emerged (step 4) with an instrument panel 
as shown in figure a lower console as shown in 
figure 6, and an upper console as shown in figure 

7. 

The primary display elements on the instru- 
ment panel consist of four identical 6.8 inch by 
6.8 inch CRT's each with eight line select 
keys on a side. A momentary toggle switch is 
located below each display. Ihe main reasons for 
driving all of the primary displays to be exactly 
alike stems from both fault tolerance requirements 
and also the need for line select keys on the 
flight displays for a modest interactive capabil- 
ity. A cluster of standby instruments is con- 
tained in the center of the instrument panel for 
safety of flight purposes. 

Ihe lower console contains a control display 
unit for each operator by which all communication, 
navigation, and identification equipments are con- 
trolled and their status displayed, an intercom 
control for each operator, and a keyboard terminal 
unit (KTU) for each operator. In the center of the 
lower console for use by both operators are the 
stabllator controls, the automatic flight controls, 
and a miscellaneous control panel. 

The upper control contains a number of switch 
functions which were not integrated for various 
reasons and a small (10 lights) caution/advisory 
panel which will be used prior to onboard auxiliary 
power unit (APU) start. After the APU is started, 
the ADAS system provides these caution/advisories. 

Ihe four CRT's are configured such that either 
a full screen display or half screen display can 
be exhibited. In normal operation the outer CRT's 
are reserved for the full screen flight display or 
full screen' waypoint map. These displays can be 
called up by either operator or depressing the FLT 
DIS or MAP buttons in the OUTER column of the KTU 
(see figure 8) . 

Ihe inner CRT's can be used either for two 
half screen displays or a full screen display. 

For interactive paging routines the lower half of 
the inner CRT will be the primary display. Ihe 
two columns of buttons on the top left of the 
KTU call up the functions which will appear in the 
lower half (viz CAU - caution, EMGY - ■ 

emergency procedures, ASE - airborne survivability 
equipment, CHK LST - checklist, SEC SYS - second- 
ary systems). The top half of the inner CRT will 
normally be devoted to the ENG MON (engine moni- 
tor) half page. The inner CRT can also be used to 
display a full screen engine page (FULL ENG) or 
the waypoint map (MAP). 

The momentary toggle located below each CRT 
is used for slewing through pages displayed on the 
lower half of the CRT. A down motion causes slew- 
ing through a set of pages (e.g. , 1 of 4, 2 of 4, 
etc . ) . An up motion returns the display to the 
branch page one level higher. 


A system block diagram Is illustrated in 
figure 9. 

The Flight Displays 

One of the major tasks of the ADAS design 
effort was to synthesize a flight display which 
would serve as a primary source of both vertical 
and horizontal information for the pilot. In ad- 
dition the display had to have the ability to 
display a master caution, warnings, and advisories. 

The display shown in figure 10 meets the 
flight display information requirements for the 
ADAS. The display is interactive in that by push- 
ing certain line select keys and entering numerics 
from the KTU the high/low bugs on the radar alti- 
tude scale can be set, barometric pressure or 
field elevation can be set, VOR course selected, 
and the navigation mode chosen. Some other fea- 
tures worth noting are: 

a) VOR radial information is continuously 
displayed (if VOR tuned to a station), 

b) magnetic bearing to an ADF station is 
continuously displayed (if ADF tuned), 

c) ground track angle is continuously dis- 
played on the heading scale when the doppler is 
operating, 

d) both magnetic bearing to destination from 
current position and course information (either 
doppler or VOR) are displayed. 

In all cases information is presented only if 
the specific subsystem is operating and the func- 
tional mode selected. 

A full page Waypoint Map (figure 11) can be 
selected for viewing by either operator on either 
CRT (see KTU dedicated buttons, figure 8). A 
single heading up display on a 1:1 M scale with 
doppler waypoints shown is depicted. Waypoint or- 
dering can be selected by depressing the line 
select key (lower left). All line connections are 
erased and a new waypoint order can be entered via 
the KTU. 

Engine Displays 

A full page engine display (figure 12) will be 
used during the engine start mode and is available 
for call up at any time by either operator on the 
inner CRT. Analogous to the "yellow" and "red" 
indications used in the standard Black Hawk, re- 
verse video and flashing reverse video' are used. ■ 
Allowable time remaining in an "out of limits" 
condition is displayed as shown in figure 13. 

During normal flight operation an engine moni- 
tor half page (figure 14) will be displayed on the 
top half of the inner CRT. RPM and engine torque 
are displayed continuously in both analog and 
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digital form (see reference 2). Allowable time 
remaining in an n out of limits' 1 condition is dis- 
played as shown in figure 15. 

The Paging Scheme 

The primary areas for interactive functions 
are the lower half of the inner CRT and the inte- 
grated avionics control display unit on the lower 
console. This latter control display is used for 
all functions associated with the corrinunication, 
navigation, identification, and security equip- 
ments. Five dedicated buttons (plus one spare) 
on the left side of the KTU are used to access the 
major branches of the interactive pages. The 
dedicated buttons are: 

1) CAU - caution 

2) CHK LST - check list 

3) EMGY - emergency procedures 

4) SEC SYS - secondary systems 

5) ASE - aircraft survivability equipment 

A total of 370 interactive pages were genera- 
ted to map the functions associated with the above 
into the ADAS architecture. The process used in 
synthesizing the pages required a detailed know- 
ledge of each of the subsystems, the current op- 
erator functions as described in the operator’s 
manual, and the level of integration of the 
electrical/control function into ADAS. 

Rules of operation and the hardware configur- 
ation were first postulated. Then as the detailed 
pages were synthesized, these rules and the hard- 
ware configuration were refined to provide for 
cases which were exceptions. Each significant 
change required a complete page analyses itera- 
tion. During this process the system input/output 
was modified several times (both by additions and 
deletions). Only after this process was completed 
could realistic flow charting for the functional 
portion of the operational software begin. 

A brief description of some of the features of' 
the ADAS paging scheme are: 

1) Caution 

When the word "CAUTION" appears in reverse 
video on the flight display (outer CRT) , the actual 
caution message(s) appear on the bottom of the 
inner CRT (in priority order if more than one). 

If the operator then depresses the caution button 
on the KTU or a button on the cyclic (during 
flight), the reverse video master caution message 
on the flight display is extinguished and the 
inner CRT displays a couplet e half page caution 
message. This message will include the emergency 
procedure associated with the caution and, for 


those functions which are controlled through ADAS, 
interactive control provided. If a detailed pro- 
cedure may be required, access to the detailed 
procedure is also provided. Figure 16 illustrates 
a caution message where both the operator proce- 
dure and access to a detailed procedure, are pro- 
vided. If more than one caution occurs at the same 
time, the messages are arranged in priority order 
and accessed through the paging switch. Depressing 
the caution button when the master caution is not 
exhibited will bring up in priority order all out- 
standing cautions (if any) or the message "NO 
CAUTIONS." 

In addition to the master reverse video caution 
on the flight display, there are five reverse video 
warnings. (ENG 1 OUT, ENG 2 OUT, LOW RTR, FIRE, HYD) . 
In the case of a warning situation, a half page 
warning message is automatically displayed on the 
lower half of the inner CRT. There are twelve (12) 
warning pages to cover the various warnings and 
combinations of warnings. An example of a warning 
message with interactive capability and access to 
a detailed procedure is shown in figure 17. 

2) Checklist 

Checklist automation is accomplished in the 
ADAS by a series of messages which require yes (or 
OK) or no as operator response. The yes response 
(the looked for response) can always be given by 
depressing the left top line select (lower half 
Inner CRT) or when on the ground a cyclic button. 

The ADAS checklist is divided into eight (8) 
branches as shown in figure 18. At system initia- 
tion (APU start), ADAS is automatically initialized 
to the first line of the Before Start sequence. As 
shown in figure 19, if the checklist requires an 
action normally accomplished through ADAS, the spe- 
cific interactive page on which the action is ac- 
complished is automatically displayed on the top 
half of the inner CRT. The checklist continues to 
sequence through to the end of the Before Takeoff 
sequence automatically. If the operator desires a 
detailed procedure (see figure 20), branching to 
the specific detailed procedure can be accomplished 
by depressing the line select opposite the > symbol. 

3) Emergency procedures 

Ninety-nine (99) pages of emergency procedures 
are contained in the ADAS. All can be accessed by 
depressing the emergency button and paging to the 
specific procedure. The primary purpose for this 
major branch is to allow the operators to gain 
familiarity with the ADAS version of the emergency 
procedures. In all cases, these procedures will 
appear either autoinatically in the case of warnings 
or with the caution message. In the case of a 
failure in the caution/waming sensors, this branch 
does provide a means for accessing the necessary 
emergency procedure if the operators ascertain the 
fault condition in another manner. 
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*1) Secondary systems 


Conclusions 


Depressing the SEC SYS button on the KTU 
brings up a menu page which provides access to the 
control functions of eighteen (13) subsystems. An 
example of a secondary system page is shown in 
figure 21. 

5) Aircraft survivability equipment 

Depressing the ASE buttons the KTU brings up 
a menu page which provides access to the surviva- 
bility equipments on board the aircraft. 

Future Plans 

Functional verification of the ADAS cockpit 
is scheduled to take place during the first half 
of next year in the Tactical Avionics System Simu- 
lator (TASS) at Fort kbnmouth. A complete dynamic 
system simulation will be performed by tying the 
ADAS 1553 data bus to a data bus port on a PDP 
11*15 • Support software which simulates all the 
multiplex remote terminal units will be used. 

After functional verification in the TASS, 
the system will be flight tested in the Avionics 
Laboratory System Test Bed for Avionics Research 
(STAR), a UH-60A. 


Synthesis of an integrated cockpit management 
system requires an iterative multidisciplined proc- 
ess in which initial conceptual system design is 
continuously modified by the effects of' the speci- 
fics of the system being addressed. This process 
does not end with fabrication of the system hard- 
ware but must be continued through carefully de- 
signed simulation and flight experiment's. In 
addition, the system must possess the flexibility 
to incorporate changes in procedures (e.g., updated 
emergency procedures) which will oddur during the 
system life cycle. 
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Fig. 1. UH-60A cockpit. 
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Pig. 9. ADAS system block diagram. 
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Pig.- 10. ADAS flight display. 



Pig. 11. ADAS waypoint map. 
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Pig. Ik. Engine monitor (half page) 
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CAUTION #1 ENG OIL TEMP HI 
ENG PUR CNTRL LEVER-RETARD TO 
REDUCE X TRQ 

IF TEMP STAYS OVER MAX ALLOWED 
ENG PUR CNTRL LEVER-SET OFF 
DO ENG SHUTDOWN 

SHUTDOWN PRCDR> 


BB 

BB 

BB 

BB 

BB 

BB 

BB 

BB 



BB 

BB 

BB 

BB 

BB 

BB 

BB 

BB 


WARNING—# 1 ENG FAIL 
RTR RPM-MAINTAIN WITH COLL 


OFF 


ENG A/ICE 


ON* 

ON 


*OFF ECU 

EXT CARGO— JETT AS REQD 

RESTART> 


BB 

BB 

BB 

BB 

BB 

BB 

BB 

BB 


Figure 17. Warning page example. 
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Fig. 18. Checklist (top page). 



ANTI- 

ICE SYSTEMS 


OFF 


PILOT 

OFF# 


ENG #1 

WINDSHIELD 

*ON 



ON 

OFF 


CD-PILOT 

OFF* 


ENG #2 

WINDSHIELD 


*ON 



ON 


BEFORE 

ENGINE START 


ENG ANTI-ICE 

SUS-SET OFF 
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Fig. 20. Checklist example 2. 
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ANTI-COLLISION LIGHTS 
UPPER DAY* * 

*BOTH OFF 

LOWER NIGHT 


BB 

SB 

SB 

SB 

mm 

mm 

mm 

mm 


Fig. 21. Secondary system page example. 
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